last executing test programs: 31m19.200925659s ago: executing program 1 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x1}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 31m19.122246697s ago: executing program 1 (id=845): r0 = syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 31m18.948361247s ago: executing program 1 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x20, &(0x7f0000000540)) 31m18.911318409s ago: executing program 1 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0xc3d33000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31m18.680936572s ago: executing program 1 (id=857): mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') 31m18.58242157s ago: executing program 1 (id=858): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000200)="927f6764c8e795db35", 0x9}, 0x1, 0x0, 0x0, 0x4004004}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) 31m3.607726691s ago: executing program 32 (id=858): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000200)="927f6764c8e795db35", 0x9}, 0x1, 0x0, 0x0, 0x4004004}, 0xee) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) 14.84034867s ago: executing program 2 (id=6263): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), 0xffffffffffffffff) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c14a8cf012b79241197fa55c95cb78c868dc7f4065db6a1f55fdb9b3b620905db1150adbd5a48a5968dce0ca0c3b439a84136af4f91b835cf51a0b762c624ee970f63316960a1c5a1e36e766cf0fbb9676e41671fbe2c846cae88f54cd08de9d971d8205b0f52c3dc829935ceb9b6f73bf7cacade0e52ab90b160f562cc866b026c1261b336312bd662d41d1b80d8141466b9092866d89534e4425d9f046c0f047516825d6671ed32c121c5aa880c9759fb464a544c710dec4bd5b3663332c9310983127de7a7c3e9253a76a0a63a3c692fb2c07fdbae7c2", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_emit_ethernet(0x132, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f, 0x6}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001114200027bd7000fedbdf2508003e0003000000fd43f7cb755912cbe0a069c7b49a5188245188daf7183daaecf2fc268193107dc3abcc26ef8591d0248f364e0e0c6cb163931e417ebd7aa66f212dbf44238577d517cba6344846ba0ebc6dbbe94e9c69c9dbcd324df64221908f742cb7d9c29fef09edb582c006"], 0x18}, 0x1, 0x0, 0x0, 0x14044000}, 0x4000004) 12.388578836s ago: executing program 0 (id=6267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000400000400000000000000400009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18fcffffffffffffff0000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100110ce8b8701175d1443d8d3f20a7e1adfa19f2420f4d6fddc9ceb1aa29260190eece185d7993900001947ac8a33503ec8d63da85dfa49619ec9413361a783801933871356c4db7373bb1bf7ae415e7a69003dbb49daa02d53a995e009f0ea3c3c16ba90ba7fd31bf0f", @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x800008, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0x94) 11.734523926s ago: executing program 3 (id=6268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000400000400000000000000400009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18fcffffffffffffff0000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100110ce8b8701175d1443d8d3f20a7e1adfa19f2420f4d6fddc9ceb1aa29260190eece185d7993900001947ac8a33503ec8d63da85dfa49619ec9413361a783801933871356c4db7373bb1bf7ae415e7a69003dbb49daa02d53a995e009f0ea3c3c16ba90ba7fd31bf0f", @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x800008, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0x94) 10.789671942s ago: executing program 0 (id=6269): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close(0x3) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0xd655f057847b30e, 0x7800, 0x4, 0x6, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 10.738664087s ago: executing program 2 (id=6270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000400000400000000000000400009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18fcffffffffffffff0000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100110ce8b8701175d1443d8d3f20a7e1adfa19f2420f4d6fddc9ceb1aa29260190eece185d7993900001947ac8a33503ec8d63da85dfa49619ec9413361a783801933871356c4db7373bb1bf7ae415e7a69003dbb49daa02d53a995e009f0ea3c3c16ba90ba7fd31bf0f", @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x800008, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0x94) 10.547788901s ago: executing program 3 (id=6272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f21"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x11) read$char_usb(r2, &(0x7f0000000040)=""/188, 0xbc) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 10.233064494s ago: executing program 4 (id=6273): ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={@local, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1ff, 0xffff, 0xc, 0x980, 0xffff, 0x40000044}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) lseek(r3, 0x9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b5"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 9.438481946s ago: executing program 2 (id=6274): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 8.722395356s ago: executing program 4 (id=6275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000400000400000000000000400009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18fcffffffffffffff0000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100110ce8b8701175d1443d8d3f20a7e1adfa19f2420f4d6fddc9ceb1aa29260190eece185d7993900001947ac8a33503ec8d63da85dfa49619ec9413361a783801933871356c4db7373bb1bf7ae415e7a69003dbb49daa02d53a995e009f0ea3c3c16ba90ba7fd31bf0f", @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x800008, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0x94) 8.218874588s ago: executing program 2 (id=6276): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), 0xffffffffffffffff) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_emit_ethernet(0x132, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f, 0x6}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001114200027bd7000fedbdf2508003e0003000000fd43f7cb755912cbe0a069c7b49a5188245188daf7183daaecf2fc268193107dc3abcc26ef8591d0248f364e0e0c6cb163931e417ebd7aa66f212dbf44238577d517cba6344846ba0ebc6dbbe94e9c69c9dbcd324df64221908f742cb7d9c29fef09edb582c006"], 0x18}, 0x1, 0x0, 0x0, 0x14044000}, 0x4000004) 7.524925223s ago: executing program 4 (id=6277): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9d, 0x7}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000180)={0x1, 0x2, 0x10001, 0x0, 0x80000001, 0x800}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0xffffffff, 0x10000, 0x81, 0xfffffffe}, 0x0, 0x4, &(0x7f0000000480)={{0x4, 0x9, 0xfffffc4c, 0xaad9}}, 0x2, 0x0, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000070000001f000000001000001f1d8db0", @ANYRES32=r1, @ANYBLOB="8000"/20, @ANYRES32, @ANYRES32, @ANYBLOB="02000000050000000100"/24, @ANYRES32=r1, @ANYBLOB="9080f369110c4b0a3aae02f9471426e4955e558867c80fc5818262ede5b45105a11388d8e54333bb4be411f032d803b297"], 0x50) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0xa, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) timer_create(0x38b88a1f4391e3f6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1808048, 0x0) 7.245531105s ago: executing program 4 (id=6278): openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={@local, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1ff, 0xffff, 0xc, 0x980, 0xffff, 0x40000044}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) lseek(r3, 0x9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b5"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 6.037656254s ago: executing program 3 (id=6279): ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={@local, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1ff, 0xffff, 0xc, 0x980, 0xffff, 0x40000044}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) lseek(r3, 0x9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b5"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 5.981267491s ago: executing program 4 (id=6280): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x1) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close(0x3) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0xd655f057847b30e, 0x7800, 0x4, 0x6, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) 4.944179715s ago: executing program 3 (id=6281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 4.78678573s ago: executing program 0 (id=6282): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 3.311464403s ago: executing program 0 (id=6283): r0 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000700)={@local, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1ff, 0xffff, 0xc, 0x980, 0xffff, 0x40000044}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) lseek(r4, 0x9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b5"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 3.243397322s ago: executing program 3 (id=6284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 2.648744143s ago: executing program 2 (id=6285): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x1) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1.863178607s ago: executing program 0 (id=6286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000400000400000000000000400009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf2505"], 0x28}}, 0x50) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000100001801000000"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @loopback}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18fcffffffffffffff0000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100110ce8b8701175d1443d8d3f20a7e1adfa19f2420f4d6fddc9ceb1aa29260190eece185d7993900001947ac8a33503ec8d63da85dfa49619ec9413361a783801933871356c4db7373bb1bf7ae415e7a69003dbb49daa02d53a995e009f0ea3c3c16ba90ba7fd31bf0f", @ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x800008, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001700)=[{0x2, 0x3, 0x5, 0x3}], 0x10, 0xb, @void, @value}, 0x94) 1.744179989s ago: executing program 4 (id=6287): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 1.315788342s ago: executing program 2 (id=6288): r0 = openat$uinput(0xffffff9c, 0x0, 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0xd, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000700)={@local, @dev={0xfe, 0x80, '\x00', 0x3b}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1ff, 0xffff, 0xc, 0x980, 0xffff, 0x40000044}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) lseek(r4, 0x9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000001c0)=ANY=[@ANYBLOB="64796e2c0069e37bf4b94eeacd224739b5"]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 1.25095568s ago: executing program 3 (id=6289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @remote, 0x1, 0x3, [@empty, @multicast1, @empty]}, 0x1c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, 0x0, 0x30010001) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 0s ago: executing program 0 (id=6290): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9d, 0x7}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000180)={0x1, 0x2, 0x10001, 0x0, 0x80000001, 0x800}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0xffffffff, 0x10000, 0x81, 0xfffffffe}, 0x0, 0x4, &(0x7f0000000480)={{0x4, 0x9, 0xfffffc4c, 0xaad9}}, 0x2, 0x0, 0x7}}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000070000001f000000001000001f1d8db0", @ANYRES32=r1, @ANYBLOB="8000"/20, @ANYRES32, @ANYRES32, @ANYBLOB="02000000050000000100"/24, @ANYRES32=r1, @ANYBLOB="9080f369110c4b0a3aae02f9471426e4955e558867c80fc5818262ede5b45105a11388d8e54333bb4be411f032d803b297"], 0x50) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0xa, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) timer_create(0x38b88a1f4391e3f6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1808048, 0x0) kernel console output (not intermixed with test programs): val 0, changing to 7 [ 1521.154336][T14936] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1521.158027][T14936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.163462][T14936] usb 5-1: config 0 descriptor?? [ 1521.370955][T14936] usbhid 5-1:0.0: can't add hid device: -71 [ 1521.373778][T14936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1521.382617][T14936] usb 5-1: USB disconnect, device number 82 [ 1521.575100][ T838] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1521.729344][ T838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.732895][ T838] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1521.736518][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1521.741383][ T838] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1521.745555][ T838] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1521.748949][ T838] usb 9-1: Manufacturer: syz [ 1521.752968][ T838] usb 9-1: config 0 descriptor?? [ 1521.757823][ T838] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1521.803220][T28860] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1521.905183][T15635] usb 7-1: USB disconnect, device number 72 [ 1521.953130][T28860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.956758][T28860] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1521.959675][T28860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.964861][T28860] usb 5-1: config 0 descriptor?? [ 1521.981867][ T839] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1522.138697][ T839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.143098][ T839] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1522.147736][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1522.159569][ T839] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1522.163775][ T839] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1522.167253][ T839] usb 8-1: Manufacturer: syz [ 1522.173153][T30399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.177222][T30399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.183636][ T839] usb 8-1: config 0 descriptor?? [ 1522.188894][T28860] usbhid 5-1:0.0: can't add hid device: -71 [ 1522.191469][T28860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1522.196567][ T839] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1522.204021][T28860] usb 5-1: USB disconnect, device number 83 [ 1522.250868][T30414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1522.621931][ T838] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1522.771841][ T838] usb 5-1: Using ep0 maxpacket: 32 [ 1522.776175][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.780689][ T838] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1522.785011][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.790462][ T838] usb 5-1: config 0 descriptor?? [ 1522.797664][ T838] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1522.814035][ T838] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1523.001914][T30423] loop6: detected capacity change from 0 to 524287999 [ 1523.226727][ T838] usb 5-1: USB disconnect, device number 84 [ 1523.376383][ T838] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1524.178247][T30434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1525.127065][T30442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1525.166068][ T838] usb 8-1: USB disconnect, device number 49 [ 1525.172508][ T839] usb 9-1: USB disconnect, device number 38 [ 1525.568989][T30450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1525.642938][ T838] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1525.803534][ T838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.807061][ T838] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1525.810468][ T838] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1525.816538][ T838] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1525.819414][ T838] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1525.822368][ T838] usb 8-1: Manufacturer: syz [ 1525.827348][ T838] usb 8-1: config 0 descriptor?? [ 1525.832691][ T838] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1525.987493][T30456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1527.051601][T30478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1527.110422][T30479] loop6: detected capacity change from 0 to 524287999 [ 1527.389926][T30480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1528.148402][T30492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1528.171927][ T1468] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1528.323870][ T1468] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.330381][ T1468] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1528.335012][ T1468] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1528.339892][ T1468] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1528.343419][ T1468] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1528.345918][ T1468] usb 5-1: Manufacturer: syz [ 1528.348762][ T1468] usb 5-1: config 0 descriptor?? [ 1528.354197][ T1468] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1528.611228][ T29] usb 8-1: USB disconnect, device number 50 [ 1529.230640][T30505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1529.929367][T30510] loop6: detected capacity change from 0 to 524287999 [ 1530.374947][T30519] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 1530.382436][T30520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1530.386865][T30519] netlink: 'syz.3.5259': attribute type 10 has an invalid length. [ 1530.392145][T30519] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 1531.472300][T15635] usb 5-1: USB disconnect, device number 85 [ 1532.162264][T28587] Bluetooth: hci4: command 0x0406 tx timeout [ 1532.164631][ T5957] Bluetooth: hci3: command 0x0406 tx timeout [ 1532.752149][T28642] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1532.918491][T28642] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.923414][T28642] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1532.927882][T28642] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1532.935664][T28642] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1532.939460][T28642] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1532.942996][T28642] usb 5-1: Manufacturer: syz [ 1532.952568][T28642] usb 5-1: config 0 descriptor?? [ 1532.959545][T28642] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1532.968486][T30554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1533.883138][T30565] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1533.906834][T30563] netlink: 'syz.2.5269': attribute type 10 has an invalid length. [ 1533.910133][T30563] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1534.188744][T30572] loop6: detected capacity change from 0 to 524287999 [ 1535.321945][ T24] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1535.474513][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.478888][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1535.483923][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1535.490724][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1535.495380][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1535.499333][ T24] usb 9-1: Manufacturer: syz [ 1535.509207][ T24] usb 9-1: config 0 descriptor?? [ 1535.514934][ T24] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1535.790353][T15635] usb 5-1: USB disconnect, device number 86 [ 1536.121874][T15635] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1536.343090][T15635] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.346289][T15635] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1536.350084][T15635] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1536.355887][T15635] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1536.358748][T15635] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1536.361282][T15635] usb 5-1: Manufacturer: syz [ 1536.365748][T15635] usb 5-1: config 0 descriptor?? [ 1536.369415][T15635] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1536.512416][T30595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1536.824961][T30599] loop6: detected capacity change from 0 to 524287999 [ 1537.221999][T28587] Bluetooth: hci1: command 0x0406 tx timeout [ 1538.190562][T30616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1538.465384][T15635] usb 9-1: USB disconnect, device number 39 [ 1538.721854][T28860] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1538.852127][T28860] usb 7-1: device descriptor read/64, error -71 [ 1538.971845][T15635] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1539.070836][T30624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1539.091821][T28860] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1539.133876][T15635] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.137399][T15635] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1539.140813][T15635] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1539.171906][T15635] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1539.200858][T15635] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1539.221393][T15635] usb 9-1: Manufacturer: syz [ 1539.222064][T28860] usb 7-1: device descriptor read/64, error -71 [ 1539.246052][T15635] usb 9-1: config 0 descriptor?? [ 1539.276401][T15635] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1539.330264][T15635] usb 5-1: USB disconnect, device number 87 [ 1539.343743][T28860] usb usb7-port1: attempt power cycle [ 1539.681976][T28860] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1539.704759][T28860] usb 7-1: device descriptor read/8, error -71 [ 1539.941840][T28860] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1539.973614][T28860] usb 7-1: device descriptor read/8, error -71 [ 1540.082935][T28860] usb usb7-port1: unable to enumerate USB device [ 1540.454590][T30640] loop6: detected capacity change from 0 to 524287999 [ 1540.861865][T25410] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1541.013068][T25410] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.016435][T25410] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1541.019873][T25410] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1541.024978][T25410] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1541.028006][T25410] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1541.030742][T25410] usb 8-1: Manufacturer: syz [ 1541.033783][T25410] usb 8-1: config 0 descriptor?? [ 1541.039183][T25410] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1542.058522][T15635] usb 9-1: USB disconnect, device number 40 [ 1542.309472][T30657] loop6: detected capacity change from 0 to 524287999 [ 1542.354889][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 1542.441898][T30661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1542.631983][ T838] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1542.809858][ T838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.818857][ T838] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1542.829080][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1542.846620][ T838] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1542.850082][ T838] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1542.852945][ T838] usb 9-1: Manufacturer: syz [ 1542.858788][ T838] usb 9-1: config 0 descriptor?? [ 1542.864351][ T838] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1543.221933][T14936] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1543.383557][T14936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.387830][T14936] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1543.392756][T14936] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1543.399347][T14936] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1543.403005][T14936] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1543.405872][T14936] usb 7-1: Manufacturer: syz [ 1543.412430][T14936] usb 7-1: config 0 descriptor?? [ 1543.417936][T14936] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1544.286323][T28860] usb 8-1: USB disconnect, device number 51 [ 1544.701841][T28860] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1544.873661][T28860] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.877237][T28860] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1544.880647][T28860] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1544.885869][T28860] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1544.889094][T28860] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1544.892284][T28860] usb 8-1: Manufacturer: syz [ 1544.895122][T28860] usb 8-1: config 0 descriptor?? [ 1544.900478][T28860] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1545.376758][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.700151][T24660] usb 9-1: USB disconnect, device number 41 [ 1546.058423][T23229] usb 7-1: USB disconnect, device number 77 [ 1546.204935][T30693] loop6: detected capacity change from 0 to 524287999 [ 1546.872949][T24660] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1547.032146][T24660] usb 9-1: device descriptor read/64, error -71 [ 1547.503994][T24660] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1547.532801][T28860] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1547.651789][T24660] usb 9-1: device descriptor read/64, error -71 [ 1547.683887][T28860] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.688109][T28860] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1547.693131][T28860] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1547.699587][T28860] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1547.703479][T28860] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1547.706862][T28860] usb 7-1: Manufacturer: syz [ 1547.710899][T28860] usb 7-1: config 0 descriptor?? [ 1547.716219][T28860] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1547.772112][T24660] usb usb9-port1: attempt power cycle [ 1547.842314][T25410] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1547.993751][T25410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.997985][T25410] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1548.002899][T25410] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1548.009447][T25410] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1548.014000][T25410] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1548.017387][T25410] usb 5-1: Manufacturer: syz [ 1548.023087][T25410] usb 5-1: config 0 descriptor?? [ 1548.028047][T25410] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1548.121920][T24660] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1548.142642][T24660] usb 9-1: device descriptor read/8, error -71 [ 1548.391855][T24660] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1548.413403][T24660] usb 9-1: device descriptor read/8, error -71 [ 1548.555667][T24660] usb usb9-port1: unable to enumerate USB device [ 1548.821380][T15635] usb 8-1: USB disconnect, device number 52 [ 1548.921804][T30721] loop6: detected capacity change from 0 to 524287999 [ 1550.955442][T25410] usb 7-1: USB disconnect, device number 78 [ 1551.361941][T14936] usb 5-1: USB disconnect, device number 88 [ 1551.666887][T30762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1551.682755][T30756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1551.842017][T14936] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1552.002484][T14936] usb 5-1: device descriptor read/64, error -71 [ 1552.272448][T14936] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1552.421994][T14936] usb 5-1: device descriptor read/64, error -71 [ 1552.532327][T14936] usb usb5-port1: attempt power cycle [ 1552.558070][T30770] team0 (unregistering): Port device team_slave_0 removed [ 1552.581783][T30770] team0 (unregistering): Port device team_slave_1 removed [ 1552.872044][T14936] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1552.892845][T14936] usb 5-1: device descriptor read/8, error -71 [ 1553.131841][T14936] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1553.156532][T14936] usb 5-1: device descriptor read/8, error -71 [ 1553.275572][T14936] usb usb5-port1: unable to enumerate USB device [ 1553.411861][T19240] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1553.792173][T25410] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1553.944266][T25410] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.947733][T25410] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1553.951245][T25410] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1553.958004][T25410] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1553.961962][T25410] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1553.965320][T25410] usb 8-1: Manufacturer: syz [ 1553.969327][T25410] usb 8-1: config 0 descriptor?? [ 1553.976357][T25410] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1554.353503][T19240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.357744][T19240] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1554.362372][T19240] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1554.368569][T19240] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1554.372254][T19240] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1554.375709][T19240] usb 7-1: Manufacturer: syz [ 1554.386247][T19240] usb 7-1: config 0 descriptor?? [ 1554.390914][T19240] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1555.128001][T30798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1555.451694][T30804] loop6: detected capacity change from 0 to 524287999 [ 1556.961628][T30819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1556.978483][T23229] usb 8-1: USB disconnect, device number 53 [ 1558.100594][T19240] usb 7-1: USB disconnect, device number 79 [ 1558.882133][ T838] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1559.156496][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.180091][ T838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1559.215715][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1559.292963][ T838] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1559.307097][ T838] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1559.331331][ T838] usb 5-1: Manufacturer: syz [ 1559.406188][ T838] usb 5-1: config 0 descriptor?? [ 1559.422675][ T838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1559.597228][T30850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1560.631283][T30861] loop6: detected capacity change from 0 to 524287999 [ 1560.851960][T25410] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1560.872921][T30866] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 1561.027075][T25410] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.030225][T25410] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1561.072964][T30866] netlink: 'syz.4.5335': attribute type 10 has an invalid length. [ 1561.075423][T30866] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 1561.612333][T25410] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1561.620145][T25410] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1561.626652][T25410] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1561.630010][T25410] usb 7-1: Manufacturer: syz [ 1561.638638][T25410] usb 7-1: config 0 descriptor?? [ 1561.646852][T25410] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1562.389049][T19240] usb 5-1: USB disconnect, device number 93 [ 1562.860856][T30888] loop6: detected capacity change from 0 to 524287999 [ 1563.262071][ T838] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1563.447499][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.468483][ T838] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1563.495375][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1563.533660][ T838] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1563.550332][ T838] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1563.570225][ T838] usb 5-1: Manufacturer: syz [ 1563.612199][ T838] usb 5-1: config 0 descriptor?? [ 1563.656993][ T838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1564.632330][T25410] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1564.770741][T30910] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 1564.779589][T30910] netlink: 'syz.3.5346': attribute type 10 has an invalid length. [ 1564.783495][T30910] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 1564.787700][T25410] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.792215][T25410] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1564.796652][T25410] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1564.803833][T25410] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1564.807922][T25410] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1565.121313][T25410] usb 9-1: Manufacturer: syz [ 1565.132674][T25410] usb 9-1: config 0 descriptor?? [ 1565.137754][T25410] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1565.197611][T24660] usb 7-1: USB disconnect, device number 80 [ 1566.811045][ T6029] usb 5-1: USB disconnect, device number 94 [ 1568.083632][ T6029] usb 9-1: USB disconnect, device number 46 [ 1568.974915][T30951] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 1568.984142][T30951] netlink: 'syz.0.5356': attribute type 10 has an invalid length. [ 1568.986823][T30951] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 1569.432166][ T24] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1569.584625][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.588892][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1569.594010][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1569.599312][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1569.602559][ T24] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1569.605281][ T24] usb 8-1: Manufacturer: syz [ 1569.609246][ T24] usb 8-1: config 0 descriptor?? [ 1569.616453][ T24] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1570.939308][T30981] loop6: detected capacity change from 0 to 524287999 [ 1571.191852][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1571.281935][T30984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1571.363467][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.371154][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1571.374899][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1571.379814][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1571.383551][ T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1571.386096][ T24] usb 5-1: Manufacturer: syz [ 1571.393846][ T24] usb 5-1: config 0 descriptor?? [ 1571.398670][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1571.432242][T25410] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1571.584238][T25410] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.588683][T25410] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1571.592284][T25410] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1571.597114][T25410] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1571.600054][T25410] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1571.604449][T25410] usb 9-1: Manufacturer: syz [ 1571.608113][T25410] usb 9-1: config 0 descriptor?? [ 1571.612556][T25410] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1571.797820][T30987] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1571.808892][T30987] netlink: 'syz.2.5365': attribute type 10 has an invalid length. [ 1571.813301][T30987] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1572.818756][T30998] loop6: detected capacity change from 0 to 524287999 [ 1573.185176][T21542] usb 8-1: USB disconnect, device number 54 [ 1574.228212][T19240] usb 5-1: USB disconnect, device number 95 [ 1575.366687][ T6029] usb 9-1: USB disconnect, device number 47 [ 1575.514644][T31030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1575.527710][T31021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1575.564321][T31029] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1575.575783][T31029] netlink: 'syz.2.5374': attribute type 10 has an invalid length. [ 1575.579217][T31029] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1575.754773][T31032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1576.291832][T19240] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1576.525204][T19240] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.938488][T19240] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1577.363952][T19240] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1577.425823][T19240] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1577.469428][T19240] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1578.051859][T19240] usb 8-1: Manufacturer: syz [ 1578.065948][T19240] usb 8-1: config 0 descriptor?? [ 1578.070722][T19240] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1578.291888][T23229] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1578.354214][T31060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5383'. [ 1578.446694][T23229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.449893][T23229] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1578.453751][T23229] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1578.459325][T23229] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1578.462547][T23229] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1578.465177][T23229] usb 9-1: Manufacturer: syz [ 1578.467983][T23229] usb 9-1: config 0 descriptor?? [ 1578.472261][T23229] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1580.178354][T31068] loop6: detected capacity change from 0 to 524287999 [ 1580.668642][T31082] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1580.695669][T31082] netlink: 'syz.2.5386': attribute type 10 has an invalid length. [ 1580.703827][T31082] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1581.100560][T15635] usb 8-1: USB disconnect, device number 55 [ 1581.156193][T31089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1581.182120][T31092] fuse: Bad value for 'fd' [ 1582.319695][T20044] usb 9-1: USB disconnect, device number 48 [ 1582.341401][T31102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1582.672052][T31105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1582.727956][T15635] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1582.856538][T31107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1582.933067][T15635] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.939123][T15635] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1582.943927][T15635] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1582.951549][T15635] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1582.955658][T15635] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1582.964522][T15635] usb 7-1: Manufacturer: syz [ 1583.011914][T31111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1583.115201][T15635] usb 7-1: config 0 descriptor?? [ 1583.150440][T15635] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1583.511978][T20044] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1583.663496][T20044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.666692][T20044] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1583.670447][T20044] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1583.676340][T20044] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1583.679701][T20044] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1583.683181][T20044] usb 8-1: Manufacturer: syz [ 1583.685898][T20044] usb 8-1: config 0 descriptor?? [ 1583.692910][T20044] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1583.953642][T31122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5397'. [ 1584.322233][T31126] loop6: detected capacity change from 0 to 524287999 [ 1585.927933][T31145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5400'. [ 1586.118404][ T24] usb 7-1: USB disconnect, device number 81 [ 1586.982980][T24660] usb 8-1: USB disconnect, device number 56 [ 1586.992323][T31153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1587.288001][T31162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5404'. [ 1588.660193][T31178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1588.682346][T28642] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1589.561858][T28642] usb 7-1: Using ep0 maxpacket: 8 [ 1589.566393][T28642] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.570483][T28642] usb 7-1: config 0 has no interfaces? [ 1589.577164][T28642] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1589.580876][T28642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.587510][T28642] usb 7-1: config 0 descriptor?? [ 1591.341804][T28642] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1591.398236][T19240] usb 7-1: USB disconnect, device number 82 [ 1591.506581][T28642] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.510869][T28642] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1591.515352][T28642] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1591.524798][T28642] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1591.528308][T28642] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1591.531651][T28642] usb 5-1: Manufacturer: syz [ 1591.545096][T28642] usb 5-1: config 0 descriptor?? [ 1591.549649][T28642] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1591.759369][T31213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5417'. [ 1592.091822][T19240] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1592.253917][T19240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.257411][T19240] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1592.261336][T19240] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1592.266382][T19240] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1592.269924][T19240] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1592.273383][T19240] usb 7-1: Manufacturer: syz [ 1592.277488][T19240] usb 7-1: config 0 descriptor?? [ 1592.287939][T19240] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1592.771892][T19240] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1592.844125][T31223] loop6: detected capacity change from 0 to 524287999 [ 1592.934932][T19240] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.938187][T19240] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1592.948728][T19240] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1592.956438][T19240] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1592.959284][T19240] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1592.963216][T19240] usb 8-1: Manufacturer: syz [ 1592.968784][T19240] usb 8-1: config 0 descriptor?? [ 1592.974932][T19240] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1593.018624][T31218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1593.727163][T31234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1594.628906][T24660] usb 5-1: USB disconnect, device number 96 [ 1595.846524][T25410] usb 7-1: USB disconnect, device number 83 [ 1595.872643][T20044] usb 8-1: USB disconnect, device number 57 [ 1596.252292][T25410] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1596.291930][T20044] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1596.412190][T25410] usb 7-1: Using ep0 maxpacket: 8 [ 1596.417590][T25410] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.420862][T25410] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1596.425126][T25410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.428947][T25410] usb 7-1: config 0 descriptor?? [ 1596.436381][T25410] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1596.443575][T20044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.446987][T20044] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1596.449846][T20044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.457323][T20044] usb 8-1: config 0 descriptor?? [ 1597.431066][T20044] usbhid 8-1:0.0: can't add hid device: -71 [ 1597.434457][T20044] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1597.439251][T20044] usb 8-1: USB disconnect, device number 58 [ 1597.881993][T28860] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1598.034148][T28860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.038641][T28860] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1598.042601][T28860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.047561][T28860] usb 8-1: config 0 descriptor?? [ 1598.256539][T31261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.259526][T31261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.266502][T28860] usbhid 8-1:0.0: can't add hid device: -71 [ 1598.269189][T28860] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1598.275109][T28860] usb 8-1: USB disconnect, device number 59 [ 1598.702424][ T24] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1598.758790][T31281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1598.852098][T28860] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1598.862365][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1598.866136][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.870648][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1598.875236][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.880566][ T24] usb 8-1: config 0 descriptor?? [ 1598.889331][ T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1598.894621][ T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1598.988126][T14936] usb 7-1: USB disconnect, device number 84 [ 1599.003700][T28860] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.008079][T28860] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1599.016078][T28860] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1599.022931][T28860] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1599.026755][T28860] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1599.030180][T28860] usb 9-1: Manufacturer: syz [ 1599.037565][T28860] usb 9-1: config 0 descriptor?? [ 1599.042946][T28860] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1599.394645][T14936] usb 8-1: USB disconnect, device number 60 [ 1599.400075][T14936] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1599.661883][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1599.802013][ T24] usb 5-1: device descriptor read/64, error -71 [ 1600.043287][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1600.141857][T28860] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1600.183407][ T24] usb 5-1: device descriptor read/64, error -71 [ 1600.269321][T31300] loop6: detected capacity change from 0 to 524287999 [ 1600.292318][ T24] usb usb5-port1: attempt power cycle [ 1600.299315][T28860] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.310095][T28860] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1600.315288][T28860] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1600.322594][T28860] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1600.327076][T28860] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1600.330727][T28860] usb 7-1: Manufacturer: syz [ 1600.349280][T28860] usb 7-1: config 0 descriptor?? [ 1600.357152][T28860] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1600.642381][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1600.662373][ T24] usb 5-1: device descriptor read/8, error -71 [ 1600.932158][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1600.953493][ T24] usb 5-1: device descriptor read/8, error -71 [ 1601.122306][T31306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5437'. [ 1601.354110][ T24] usb usb5-port1: unable to enumerate USB device [ 1601.939026][ T6029] usb 9-1: USB disconnect, device number 49 [ 1602.262530][T25410] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1602.413819][T25410] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.417862][T25410] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1602.422444][T25410] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1602.428678][T25410] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1602.433839][T25410] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1602.437338][T25410] usb 8-1: Manufacturer: syz [ 1602.444156][T25410] usb 8-1: config 0 descriptor?? [ 1602.449136][T25410] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1602.718305][T31319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1603.232056][T15635] usb 7-1: USB disconnect, device number 85 [ 1603.571954][T31323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5441'. [ 1603.589681][T31327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1603.749680][T31332] loop6: detected capacity change from 0 to 524287999 [ 1604.443276][T31331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1604.591974][T28860] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1604.763993][T28860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.768961][T28860] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1604.773209][T28860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.796237][T28860] usb 9-1: config 0 descriptor?? [ 1604.841864][T15635] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1605.005658][T15635] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.009127][T15635] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1605.012624][T15635] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1605.017623][T15635] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1605.020660][T15635] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1605.023313][T15635] usb 7-1: Manufacturer: syz [ 1605.026832][T15635] usb 7-1: config 0 descriptor?? [ 1605.032621][T15635] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1605.045383][T28860] usbhid 9-1:0.0: can't add hid device: -71 [ 1605.057600][T28860] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1605.086746][T28860] usb 9-1: USB disconnect, device number 50 [ 1605.501265][T21542] usb 8-1: USB disconnect, device number 61 [ 1605.591867][T28860] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1605.907570][T28860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.945120][T31350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1606.730507][T28860] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1606.734767][T28860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.740105][T28860] usb 9-1: config 0 descriptor?? [ 1606.847470][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.857106][T31359] loop6: detected capacity change from 0 to 524287999 [ 1606.908939][T31360] fuse: Bad value for 'fd' [ 1607.280867][T31336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.306617][T31336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.702460][T28860] usbhid 9-1:0.0: can't add hid device: -71 [ 1607.705053][T28860] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1607.710088][T28860] usb 9-1: USB disconnect, device number 51 [ 1607.725896][T31367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5451'. [ 1607.930187][T31370] fuse: Bad value for 'fd' [ 1609.459918][T31379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5454'. [ 1609.843967][T21542] usb 7-1: USB disconnect, device number 86 [ 1609.857577][T31384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5455'. [ 1610.002242][T31389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5456'. [ 1610.294655][T31392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1611.280597][T31396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5459'. [ 1611.743647][T31408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5461'. [ 1612.051971][T14936] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1612.332014][T14936] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.336481][T14936] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1612.340930][T14936] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1613.139552][T14936] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1613.190246][T14936] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1613.193851][T14936] usb 9-1: Manufacturer: syz [ 1613.200044][T14936] usb 9-1: config 0 descriptor?? [ 1613.213703][T14936] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1613.471794][T28860] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1613.660770][T28860] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.193728][T28860] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1614.198545][T28860] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1614.244983][T28860] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1614.247999][T28860] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1614.250518][T28860] usb 8-1: Manufacturer: syz [ 1614.253754][T28860] usb 8-1: config 0 descriptor?? [ 1614.259297][T28860] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1614.333904][T31434] fuse: Bad value for 'fd' [ 1614.796302][T31439] loop6: detected capacity change from 0 to 524287999 [ 1615.161893][T19240] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1615.343257][T19240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.346766][T19240] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1615.350646][T19240] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1615.356616][T19240] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1615.359605][T19240] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1615.365994][T19240] usb 7-1: Manufacturer: syz [ 1615.372286][T19240] usb 7-1: config 0 descriptor?? [ 1615.378215][T19240] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1615.608778][T31448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1617.160088][T31458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5472'. [ 1617.189569][T21542] usb 9-1: USB disconnect, device number 52 [ 1617.571806][T14936] usb 8-1: USB disconnect, device number 62 [ 1618.700764][T25410] usb 7-1: USB disconnect, device number 87 [ 1619.113554][T31480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1620.393472][T31491] fuse: Bad value for 'fd' [ 1621.062463][T21542] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1621.267436][T21542] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.287278][T21542] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1621.327248][T21542] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1621.361548][T21542] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1621.394233][T21542] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1621.424038][T21542] usb 5-1: Manufacturer: syz [ 1621.482482][T21542] usb 5-1: config 0 descriptor?? [ 1621.581328][T21542] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1622.349484][T28642] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1622.583634][T28642] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.588623][T28642] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1622.593502][T28642] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1622.600492][T28642] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1622.604245][T28642] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1622.607793][T28642] usb 7-1: Manufacturer: syz [ 1622.612975][T28642] usb 7-1: config 0 descriptor?? [ 1622.621876][T28642] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1622.661952][T31513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1622.960957][T31512] loop6: detected capacity change from 0 to 524287999 [ 1624.301140][T31532] lo speed is unknown, defaulting to 1000 [ 1624.473983][T24660] usb 5-1: USB disconnect, device number 101 [ 1625.952281][T25410] usb 7-1: USB disconnect, device number 88 [ 1626.524445][T31551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1626.991841][T24660] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1627.172938][T24660] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.193071][T24660] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1627.220685][T24660] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1627.252731][T24660] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1627.258666][T24660] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1627.261373][T24660] usb 8-1: Manufacturer: syz [ 1627.287250][T24660] usb 8-1: config 0 descriptor?? [ 1627.330050][T24660] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1628.026274][T31569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5497'. [ 1628.149891][T31572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5498'. [ 1628.653377][T31576] loop6: detected capacity change from 0 to 524287999 [ 1629.196265][T31587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1629.431988][T25410] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1629.934699][T25410] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.938449][T25410] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1629.942679][T25410] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1629.949482][T25410] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1629.953730][T25410] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1629.957063][T25410] usb 7-1: Manufacturer: syz [ 1629.961301][T25410] usb 7-1: config 0 descriptor?? [ 1629.966701][T25410] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1630.364991][T31598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5503'. [ 1630.384518][T21542] usb 8-1: USB disconnect, device number 63 [ 1631.206187][T31613] loop6: detected capacity change from 0 to 524287999 [ 1632.131918][T14936] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1632.283706][T14936] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.288165][T14936] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1632.292753][T14936] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1632.299343][T14936] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1632.303492][T14936] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1632.306954][T14936] usb 9-1: Manufacturer: syz [ 1632.312676][T14936] usb 9-1: config 0 descriptor?? [ 1632.317723][T14936] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1632.859448][T31632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1632.991858][ T6811] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1633.163971][ T6811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.168271][ T6811] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1633.173472][ T6811] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1633.180507][ T6811] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1633.184398][ T6811] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1633.187745][ T6811] usb 5-1: Manufacturer: syz [ 1633.191951][ T6811] usb 5-1: config 0 descriptor?? [ 1633.202391][ T6811] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1633.253287][T28642] usb 7-1: USB disconnect, device number 89 [ 1633.355604][T31637] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1633.364834][T31637] netlink: 'syz.2.5513': attribute type 10 has an invalid length. [ 1633.367368][T31637] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1633.872916][T31639] loop6: detected capacity change from 0 to 524287999 [ 1634.441883][T14936] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1634.612292][T14936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.622099][T14936] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1634.626609][T14936] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1634.656137][T14936] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1634.660356][T14936] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1634.670451][T14936] usb 7-1: Manufacturer: syz [ 1634.692297][T14936] usb 7-1: config 0 descriptor?? [ 1634.700741][T14936] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1636.251510][T14936] usb 5-1: USB disconnect, device number 102 [ 1636.528361][T25410] usb 9-1: USB disconnect, device number 53 [ 1637.273575][T31675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1637.861919][T25410] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1637.928699][T31686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5522'. [ 1638.013557][T25410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.018239][T25410] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1638.022124][T25410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.028570][T25410] usb 8-1: config 0 descriptor?? [ 1638.241058][T31681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.247687][T31681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.454832][T31681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.459288][T31681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.536557][T21542] usb 7-1: USB disconnect, device number 90 [ 1638.592828][T31695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1638.804872][T25410] usbhid 8-1:0.0: can't add hid device: -71 [ 1638.807584][T25410] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1638.814898][T25410] usb 8-1: USB disconnect, device number 64 [ 1638.894033][T31699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1639.822382][T21542] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1640.022039][T21542] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.027400][T21542] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1640.031942][T21542] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1640.044044][T21542] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1640.048199][T21542] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1640.052138][T21542] usb 7-1: Manufacturer: syz [ 1640.102380][T21542] usb 7-1: config 0 descriptor?? [ 1640.402272][ T838] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1640.542995][T21542] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1640.565622][ T838] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.569066][ T838] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1640.577792][ T838] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1640.587218][ T838] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1640.590042][ T838] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1640.593659][ T838] usb 8-1: Manufacturer: syz [ 1640.596830][ T838] usb 8-1: config 0 descriptor?? [ 1640.601409][ T838] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1640.841925][T21542] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1641.043148][T21542] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.046102][T21542] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1641.049153][T21542] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1641.053794][T21542] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1641.163377][T21542] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1641.166398][T21542] usb 9-1: Manufacturer: syz [ 1641.170698][T21542] usb 9-1: config 0 descriptor?? [ 1641.176025][T21542] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1641.357723][T31726] loop6: detected capacity change from 0 to 524287999 [ 1643.026432][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1643.404354][T21542] usb 8-1: USB disconnect, device number 65 [ 1643.436101][T24660] usb 7-1: USB disconnect, device number 91 [ 1644.486154][T21542] usb 9-1: USB disconnect, device number 54 [ 1645.266790][T31772] 9pnet_virtio: no channels available for device syz [ 1645.634864][T19240] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1645.781858][T19240] usb 7-1: Using ep0 maxpacket: 8 [ 1645.812625][T19240] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1645.821085][T19240] usb 7-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1645.833146][T19240] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1645.863062][T19240] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1645.883154][T19240] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1645.890457][T19240] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1645.903030][T19240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.988528][T19240] usbtmc 7-1:16.0: bulk endpoints not found [ 1647.269124][T31795] 9pnet_virtio: no channels available for device syz [ 1648.410438][T19240] usb 7-1: USB disconnect, device number 92 [ 1649.354881][T31822] 9pnet_virtio: no channels available for device syz [ 1649.542132][T25410] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1649.993114][T25410] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.996334][T25410] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1650.000138][T25410] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1650.005732][T25410] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1650.008555][T25410] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1650.011070][T25410] usb 8-1: Manufacturer: syz [ 1650.018035][T25410] usb 8-1: config 0 descriptor?? [ 1650.022478][T25410] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1651.361374][T31847] loop6: detected capacity change from 0 to 524287999 [ 1651.632921][ T838] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1651.805216][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 1651.838407][ T838] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1651.840962][ T838] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1651.848613][ T838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1651.858609][ T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1651.863152][ T838] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1651.871977][ T838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1651.875798][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.897356][ T838] usbtmc 5-1:16.0: bulk endpoints not found [ 1652.919808][T31868] 9pnet_virtio: no channels available for device syz [ 1653.217063][T24660] usb 8-1: USB disconnect, device number 66 [ 1653.642519][T31875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5567'. [ 1654.303833][ T838] usb 5-1: USB disconnect, device number 103 [ 1654.791121][T31890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1656.436724][T31911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1657.272137][T31912] 9pnet_virtio: no channels available for device syz [ 1657.549622][T31919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1657.651861][T28642] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1657.811889][T28642] usb 7-1: Using ep0 maxpacket: 8 [ 1657.815166][T28642] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1657.817710][T28642] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1657.821087][T28642] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1657.824287][T28642] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1657.828227][T28642] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1657.831029][T28642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.839561][T28642] usbtmc 7-1:16.0: bulk endpoints not found [ 1658.213246][T31929] Cache volume key already in use (9p,syz,) [ 1659.749816][T31949] 9pnet_virtio: no channels available for device syz [ 1660.129642][T31953] Cache volume key already in use (9p,syz,) [ 1660.407861][T28642] usb 7-1: USB disconnect, device number 93 [ 1660.547535][T31963] 9pnet_virtio: no channels available for device syz [ 1661.234404][T31962] 9pnet_virtio: no channels available for device syz [ 1661.237535][T31964] 9pnet_virtio: no channels available for device syz [ 1662.053151][T31979] 9pnet_virtio: no channels available for device syz [ 1662.187892][T31980] 9pnet_virtio: no channels available for device syz [ 1663.061914][T28642] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1663.211893][T28642] usb 7-1: Using ep0 maxpacket: 8 [ 1663.215837][T28642] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1663.219332][T28642] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1663.224304][T28642] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1663.228342][T28642] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1663.234147][T28642] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1663.237956][T28642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.305101][T31993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1663.384982][T28642] usbtmc 7-1:16.0: bulk endpoints not found [ 1664.673259][T32000] 9pnet_virtio: no channels available for device syz [ 1664.802039][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1664.931944][ T24] usb 5-1: device descriptor read/64, error -71 [ 1665.201943][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1665.208536][T32011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5603'. [ 1665.331964][ T24] usb 5-1: device descriptor read/64, error -71 [ 1665.442210][ T24] usb usb5-port1: attempt power cycle [ 1665.784185][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1665.804261][ T24] usb 5-1: device descriptor read/8, error -71 [ 1665.825270][T20044] usb 7-1: USB disconnect, device number 94 [ 1666.051873][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1666.072542][ T24] usb 5-1: device descriptor read/8, error -71 [ 1666.192024][T32021] 9pnet_virtio: no channels available for device syz [ 1666.192389][ T24] usb usb5-port1: unable to enumerate USB device [ 1666.301140][T32022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5606'. [ 1667.296826][T32034] 9pnet_virtio: no channels available for device syz [ 1668.186463][T32031] 9pnet_virtio: no channels available for device syz [ 1668.211372][T32037] 9pnet_virtio: no channels available for device syz [ 1668.247920][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.912692][T32051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1668.962022][T20044] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1669.111901][T20044] usb 7-1: Using ep0 maxpacket: 8 [ 1669.116229][T20044] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1669.119725][T20044] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1669.125872][T20044] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1669.130330][T20044] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1669.136246][T20044] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1669.140150][T20044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.153536][T20044] usbtmc 7-1:16.0: bulk endpoints not found [ 1669.288407][T32052] 9pnet_virtio: no channels available for device syz [ 1669.882827][T32060] Cache volume key already in use (9p,syz,) [ 1670.067972][T32061] 9pnet_virtio: no channels available for device syz [ 1670.518148][T32065] 9pnet_virtio: no channels available for device syz [ 1671.554289][ T24] usb 7-1: USB disconnect, device number 95 [ 1671.732657][T20044] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1671.862017][T20044] usb 9-1: device descriptor read/64, error -71 [ 1672.162222][T20044] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1672.298578][T20044] usb 9-1: device descriptor read/64, error -71 [ 1672.454861][T20044] usb usb9-port1: attempt power cycle [ 1672.848710][T20044] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1672.873756][T20044] usb 9-1: device descriptor read/8, error -71 [ 1672.894178][T32072] 9pnet_virtio: no channels available for device syz [ 1673.117852][T20044] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1673.144854][T20044] usb 9-1: device descriptor read/8, error -71 [ 1673.275503][T20044] usb usb9-port1: unable to enumerate USB device [ 1673.529134][T32077] 9pnet_virtio: no channels available for device syz [ 1674.258437][T32085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1674.692882][T32090] 9pnet_virtio: no channels available for device syz [ 1675.838947][T32097] 9pnet_virtio: no channels available for device syz [ 1676.790282][T32107] 9pnet_virtio: no channels available for device syz [ 1678.670894][T32121] 9pnet_virtio: no channels available for device syz [ 1679.398395][T19240] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1679.413738][T32128] fuse: Bad value for 'group_id' [ 1679.416457][T32128] fuse: Bad value for 'group_id' [ 1679.542788][T19240] usb 9-1: device descriptor read/64, error -71 [ 1679.813670][T19240] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1680.117442][T19240] usb 9-1: device descriptor read/64, error -71 [ 1680.254902][T19240] usb usb9-port1: attempt power cycle [ 1680.637673][T19240] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1680.872117][T19240] usb 9-1: device not accepting address 61, error -71 [ 1682.093172][T32143] netlink: 'syz.3.5635': attribute type 10 has an invalid length. [ 1682.418713][T32142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1683.201070][T32153] 9pnet_virtio: no channels available for device syz [ 1683.981245][T32158] 9pnet_virtio: no channels available for device syz [ 1684.770340][T32165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5645'. [ 1685.329623][T32169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5643'. [ 1685.350186][T32168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1685.836997][T32179] 9pnet_virtio: no channels available for device syz [ 1687.150910][T32181] Cache volume key already in use (9p,syz,) [ 1687.730387][T32186] 9pnet_virtio: no channels available for device syz [ 1687.891811][T32195] 9pnet_virtio: no channels available for device syz [ 1688.025191][T32194] lo speed is unknown, defaulting to 1000 [ 1690.027944][T32211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5656'. [ 1690.424470][T32218] Cache volume key already in use (9p,syz,) [ 1690.552099][T32221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5658'. [ 1691.215513][T32225] 9pnet_virtio: no channels available for device syz [ 1692.571509][T32234] 9pnet_virtio: no channels available for device syz [ 1693.436695][T32239] Cache volume key already in use (9p,syz,) [ 1693.991828][T14936] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1694.138903][T32248] 9pnet_virtio: no channels available for device syz [ 1694.151956][T14936] usb 9-1: device descriptor read/64, error -71 [ 1694.430320][T14936] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1694.645831][T14936] usb 9-1: device descriptor read/64, error -71 [ 1694.778251][T14936] usb usb9-port1: attempt power cycle [ 1695.112095][T32253] 9pnet_virtio: no channels available for device syz [ 1695.155881][T14936] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1695.185137][T14936] usb 9-1: device descriptor read/8, error -71 [ 1696.366927][T14936] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1696.385623][T14936] usb 9-1: device descriptor read/8, error -71 [ 1696.475466][T32259] fuse: Unknown parameter 'grou00000000000000000000' [ 1697.047975][T14936] usb usb9-port1: unable to enumerate USB device [ 1697.275711][T32269] 9pnet_virtio: no channels available for device syz [ 1698.505930][T32271] 9pnet_virtio: no channels available for device syz [ 1698.567849][T32281] 9pnet_virtio: no channels available for device syz [ 1698.686847][T32282] 9pnet_virtio: no channels available for device syz [ 1700.398305][T32295] 9pnet_virtio: no channels available for device syz [ 1700.420161][T32294] 9pnet_virtio: no channels available for device syz [ 1703.961175][T32324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1704.009710][T32322] 9pnet_virtio: no channels available for device syz [ 1704.733685][T32327] netlink: 'syz.2.5684': attribute type 10 has an invalid length. [ 1707.292551][T32336] 9pnet_virtio: no channels available for device syz [ 1707.342298][T32349] 9pnet_virtio: no channels available for device syz [ 1708.597505][T32358] 9pnet_virtio: no channels available for device syz [ 1709.392132][T31280] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1709.584269][T31280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.588750][T31280] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1709.593325][T31280] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1709.604671][T31280] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1710.100799][T31280] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1710.106698][T31280] usb 5-1: Manufacturer: syz [ 1710.122729][T31280] usb 5-1: config 0 descriptor?? [ 1710.135410][T31280] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1710.715808][T20044] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1710.963140][T32373] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1711.065880][T20044] usb 9-1: device descriptor read/64, error -71 [ 1711.349335][T20044] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1711.487119][T32374] IPVS: stopping backup sync thread 32373 ... [ 1712.221266][T20044] usb 9-1: device descriptor read/64, error -71 [ 1712.363168][T20044] usb usb9-port1: attempt power cycle [ 1712.981060][T32385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1714.814612][T31337] usb 5-1: USB disconnect, device number 108 [ 1715.268442][T32398] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1715.272355][T32388] IPVS: stopping backup sync thread 32398 ... [ 1716.314665][T32404] fuse: Bad value for 'group_id' [ 1716.316942][T32404] fuse: Bad value for 'group_id' [ 1718.622472][T32427] IPVS: stopping backup sync thread 32428 ... [ 1719.279060][T32435] fuse: Unknown parameter 'group_id00000000000000000000' [ 1721.965329][T32447] 9pnet_virtio: no channels available for device syz [ 1723.087849][T32458] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1723.095475][T32457] IPVS: stopping backup sync thread 32458 ... [ 1724.433588][T32468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1724.456111][T32472] fuse: Bad value for 'fd' [ 1724.519927][T32474] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1724.524666][T32462] IPVS: stopping backup sync thread 32474 ... [ 1724.743374][T32477] IPVS: stopping backup sync thread 32476 ... [ 1724.779663][T32476] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1726.857954][T32491] fuse: Unknown parameter 'grou00000000000000000000' [ 1727.451530][T20044] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1727.691814][T20044] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.709894][T32500] fuse: Unknown parameter 'grou00000000000000000000' [ 1728.562983][T20044] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1728.610558][T20044] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1728.615492][T20044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.635144][T32505] fuse: Bad value for 'fd' [ 1728.666698][T20044] usb 9-1: config 0 descriptor?? [ 1728.773826][T32506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1729.059218][T29340] usb 9-1: USB disconnect, device number 70 [ 1729.532863][T31280] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1729.595869][T32513] fuse: Unknown parameter 'grou00000000000000000000' [ 1729.597841][T29340] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1729.702479][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.797562][T29340] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.830495][T29340] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1729.835635][T31280] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.872811][T31280] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1729.878063][T29340] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1729.887520][T31280] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1729.921234][T29340] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.922774][T31280] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1729.957419][T31280] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1729.971276][T31280] usb 8-1: Manufacturer: syz [ 1729.982074][T31280] usb 8-1: config 0 descriptor?? [ 1730.012282][T31280] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1730.020458][T29340] usb 9-1: config 0 descriptor?? [ 1730.239511][T32490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.267856][T32490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.288712][T25410] usb 9-1: USB disconnect, device number 71 [ 1730.813944][T25410] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1730.975864][T25410] usb 9-1: Using ep0 maxpacket: 32 [ 1730.991324][T25410] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.999289][T25410] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1731.012838][T25410] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1731.019611][T25410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.035891][T25410] usb 9-1: config 0 descriptor?? [ 1731.251798][T25410] usb 9-1: USB disconnect, device number 72 [ 1731.573787][T32528] loop6: detected capacity change from 0 to 524287999 [ 1731.899610][T32531] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1731.901673][T32530] IPVS: stopping backup sync thread 32531 ... [ 1732.183207][T32536] fuse: Bad value for 'user_id' [ 1732.205607][T32536] fuse: Bad value for 'user_id' [ 1733.299838][T32542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1733.982486][ T6029] usb 8-1: USB disconnect, device number 67 [ 1734.398648][T32551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5733'. [ 1735.144422][T32555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1735.697658][T32557] fuse: Bad value for 'group_id' [ 1735.700844][T32557] fuse: Bad value for 'group_id' [ 1735.976758][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1736.520117][T32567] fuse: Unknown parameter 'group_id00000000000000000000' [ 1738.432170][T31280] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1738.659908][T31280] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.716358][T31280] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1738.730222][T32580] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1738.730566][T32579] IPVS: stopping backup sync thread 32580 ... [ 1738.749217][T31280] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1738.801597][T31280] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1738.822966][T31280] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1738.850321][T31280] usb 8-1: Manufacturer: syz [ 1738.861308][T31280] usb 8-1: config 0 descriptor?? [ 1738.895927][T31280] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1740.358019][T32586] loop6: detected capacity change from 0 to 524287999 [ 1741.505564][T32595] fuse: Unknown parameter 'user00000000000000000000' [ 1742.842144][T29340] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1742.900274][T32602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1743.051036][T29340] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.058937][T29340] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1743.091517][T29340] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1743.101203][T29340] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1743.108404][T29340] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1743.116023][T29340] usb 9-1: Manufacturer: syz [ 1743.120992][T29340] usb 9-1: config 0 descriptor?? [ 1743.130167][T29340] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1743.145851][T15635] usb 8-1: USB disconnect, device number 68 [ 1744.382537][T32609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1744.480663][T32613] IPVS: stopping backup sync thread 32618 ... [ 1744.537754][T32619] loop6: detected capacity change from 0 to 524287999 [ 1746.307018][T31280] usb 9-1: USB disconnect, device number 73 [ 1746.825243][T32632] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1746.825656][T32631] IPVS: stopping backup sync thread 32632 ... [ 1747.435879][T32633] IPVS: stopping backup sync thread 32634 ... [ 1748.079681][T32638] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1748.080139][T32637] IPVS: stopping backup sync thread 32638 ... [ 1749.176235][T32651] fuse: Unknown parameter 'user_i00000000000000000000' [ 1750.432342][T29340] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1750.588537][T29340] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.620039][T29340] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1750.625201][T29340] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1750.633814][T29340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.642407][T29340] usb 8-1: config 0 descriptor?? [ 1750.866928][T31280] usb 8-1: USB disconnect, device number 69 [ 1751.322482][T31280] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1751.484314][T31280] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.488579][T31280] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1751.502392][T31280] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1751.512194][T31280] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.522640][T31280] usb 8-1: config 0 descriptor?? [ 1751.738180][T32656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.755079][T32656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.794193][T29340] usb 8-1: USB disconnect, device number 70 [ 1752.289136][T32671] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1752.313051][T29340] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1752.406807][T25410] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1752.428637][T32673] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1752.432509][T32672] IPVS: stopping backup sync thread 32673 ... [ 1752.492454][T29340] usb 8-1: Using ep0 maxpacket: 32 [ 1752.505328][T29340] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.509434][T29340] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1752.540733][T29340] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1752.545404][T29340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.566152][T25410] usb 7-1: Using ep0 maxpacket: 8 [ 1752.569661][T25410] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1752.588370][T25410] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1752.611402][T29340] usb 8-1: config 0 descriptor?? [ 1752.632068][T25410] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1752.638706][T25410] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1752.665740][T25410] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1752.671493][T25410] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1752.693351][T25410] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1752.698662][T25410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.870952][T29340] usb 8-1: USB disconnect, device number 71 [ 1752.917922][T25410] usb 7-1: usb_control_msg returned -32 [ 1752.935906][T25410] usbtmc 7-1:16.0: can't read capabilities [ 1752.946563][T25410] usb 7-1: USB disconnect, device number 96 [ 1753.529622][T32681] fuse: Unknown parameter '0x0000000000000005' [ 1754.187398][T32687] fuse: Unknown parameter 'user_i00000000000000000000' [ 1755.558545][T32699] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1755.558978][T32686] IPVS: stopping backup sync thread 32699 ... [ 1755.595224][T32701] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1755.595676][T32700] IPVS: stopping backup sync thread 32701 ... [ 1756.432537][T32705] fuse: Unknown parameter 'user00000000000000000000' [ 1757.324133][T32711] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1757.412807][T32711] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 1757.418298][T32711] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1757.985541][T32715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5766'. [ 1758.394802][T31280] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1758.503727][T23229] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1758.567589][T31280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.605251][T31280] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1758.610529][T31280] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1758.630801][T31280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.641434][T31280] usb 5-1: config 0 descriptor?? [ 1758.654311][T23229] usb 9-1: Using ep0 maxpacket: 8 [ 1758.658423][T23229] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1758.662626][T23229] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1758.682351][T23229] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1758.690233][T31280] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1758.726645][T23229] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1758.748903][T23229] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1758.756327][T23229] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1758.766715][T23229] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1758.772596][T23229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.951652][T31280] usb 5-1: USB disconnect, device number 109 [ 1759.039567][T23229] usb 9-1: usb_control_msg returned -32 [ 1759.042090][T23229] usbtmc 9-1:16.0: can't read capabilities [ 1759.088411][T23229] usb 9-1: USB disconnect, device number 74 [ 1759.431934][T31280] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1759.594098][T31280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.609071][T31280] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1759.614682][T31280] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1759.643772][T31280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.701013][T31280] usb 5-1: config 0 descriptor?? [ 1759.715600][T32731] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1759.715729][T32729] IPVS: stopping backup sync thread 32731 ... [ 1759.726900][T31280] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1759.929570][T32718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.934916][T32718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.951328][T31280] usb 5-1: USB disconnect, device number 110 [ 1760.281532][T32734] IPVS: stopping backup sync thread 32733 ... [ 1762.068317][T32750] fuse: Unknown parameter '0x0000000000000005' [ 1763.179854][T32759] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 1763.352411][T32759] netlink: 'syz.4.5780': attribute type 10 has an invalid length. [ 1763.372848][T32759] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 1763.917085][T32762] IPVS: stopping backup sync thread 32671 ... [ 1764.096239][T32767] fuse: Unknown parameter 'user_id00000000000000000000' [ 1764.281688][ T839] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1764.523230][ T839] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.622076][ T839] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1764.654397][ T839] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1764.687851][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.719673][ T839] usb 9-1: config 0 descriptor?? [ 1764.728513][ T839] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1765.454381][T29340] usb 9-1: USB disconnect, device number 75 [ 1765.798596][ T306] fuse: Unknown parameter 'user_id00000000000000000000' [ 1766.273926][T29340] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1768.200777][ T321] fuse: Unknown parameter 'user_i00000000000000000000' [ 1770.084188][ T329] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1770.095614][ T323] IPVS: stopping backup sync thread 329 ... [ 1770.367415][ T333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5791'. [ 1770.452930][ T334] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1770.469609][ T318] IPVS: stopping backup sync thread 334 ... [ 1771.765202][ T338] 9pnet_virtio: no channels available for device syz [ 1772.401152][ T839] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1772.574537][ T839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.579675][ T839] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1772.596515][ T839] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1772.602479][T31280] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1772.623314][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.636225][ T839] usb 5-1: config 0 descriptor?? [ 1772.661489][ T839] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1772.914267][T31280] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.932925][T31280] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1772.939830][T31280] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1772.949001][ T839] usb 5-1: USB disconnect, device number 111 [ 1773.417909][ T351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1773.457826][T31280] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1773.468013][T31280] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1773.475526][T31280] usb 8-1: Manufacturer: syz [ 1773.487315][T31280] usb 8-1: config 0 descriptor?? [ 1773.505176][T31280] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1773.811940][ T839] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1773.985195][ T839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.033423][ T839] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1774.046986][ T839] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1774.067719][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.092311][ T839] usb 5-1: config 0 descriptor?? [ 1774.127229][ T839] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1774.346094][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.350053][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.363670][T19240] usb 5-1: USB disconnect, device number 112 [ 1774.905340][ T358] fuse: Bad value for 'user_id' [ 1774.907598][ T358] fuse: Bad value for 'user_id' [ 1775.441079][ T363] loop6: detected capacity change from 0 to 524287999 [ 1777.074404][ T380] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1777.094834][ T379] IPVS: stopping backup sync thread 380 ... [ 1778.005157][T15635] usb 8-1: USB disconnect, device number 72 [ 1778.072322][ T388] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1778.094085][ T388] netlink: 'syz.2.5803': attribute type 10 has an invalid length. [ 1778.104291][ T388] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1779.966342][ T408] Cache volume key already in use (9p,syz,) [ 1780.177122][ T414] fuse: Bad value for 'user_id' [ 1780.179366][ T414] fuse: Bad value for 'user_id' [ 1781.182633][ T418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5810'. [ 1781.740213][ T424] 9pnet_virtio: no channels available for device syz [ 1781.986521][ T427] fuse: Bad value for 'fd' [ 1785.069802][ T432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1785.213255][ T448] IPVS: stopping backup sync thread 449 ... [ 1786.589074][ T464] fuse: Bad value for 'fd' [ 1787.491899][T31280] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1787.668641][T31280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.677593][T31280] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1787.700865][T31280] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1787.709316][T31280] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1787.714308][T31280] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1787.718448][T31280] usb 5-1: Manufacturer: syz [ 1787.722672][T31280] usb 5-1: config 0 descriptor?? [ 1787.728852][T31280] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1788.022137][ T472] IPVS: stopping backup sync thread 473 ... [ 1788.339237][ T475] IPVS: stopping backup sync thread 476 ... [ 1789.225972][ T485] loop6: detected capacity change from 0 to 524287999 [ 1791.185083][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.344575][ T507] fuse: Unknown parameter 'user00000000000000000000' [ 1792.795959][ T513] fuse: Bad value for 'fd' [ 1793.211891][ T6029] usb 5-1: USB disconnect, device number 113 [ 1795.045998][ T514] 9pnet_virtio: no channels available for device syz [ 1797.154152][ T545] fuse: Unknown parameter '0x0000000000000005' [ 1799.099293][ T557] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1800.749332][ T571] 9pnet_virtio: no channels available for device syz [ 1802.858380][ T578] 9pnet_virtio: no channels available for device syz [ 1803.199903][ T584] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1803.285994][ T588] IPVS: stopping backup sync thread 584 ... [ 1805.875346][ T613] IPVS: stopping backup sync thread 614 ... [ 1808.355654][ T639] IPVS: stopping backup sync thread 640 ... [ 1810.617213][ T635] IPVS: stopping backup sync thread 557 ... [ 1812.084886][ T666] 9pnet_virtio: no channels available for device syz [ 1812.974122][T29340] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1813.327560][T29340] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1813.460374][T29340] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1813.557838][T29340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.622357][T29340] usb 7-1: config 0 descriptor?? [ 1813.715359][T29340] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1814.153576][ T838] usb 7-1: USB disconnect, device number 97 [ 1814.652349][T29340] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1814.825104][T29340] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1814.829710][T29340] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1814.861884][T29340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.947306][T29340] usb 7-1: config 0 descriptor?? [ 1815.004689][T29340] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1815.238216][ T670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.245558][ T670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.263861][T29340] usb 7-1: USB disconnect, device number 98 [ 1815.732211][T29340] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1815.951245][T29340] usb 7-1: Using ep0 maxpacket: 32 [ 1815.955725][T29340] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1815.961369][T29340] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1815.967048][T29340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.978957][T29340] usb 7-1: config 0 descriptor?? [ 1815.990608][T29340] ldusb 7-1:0.0: Interrupt in endpoint not found [ 1816.027734][T29340] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1816.190649][T29340] usb 7-1: USB disconnect, device number 99 [ 1816.314522][ T693] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1816.319777][ T692] IPVS: stopping backup sync thread 693 ... [ 1817.046470][ T700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1818.785675][T29340] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1818.791958][ C3] raw-gadget.0 gadget.0: ignoring, device is not running [ 1818.945696][T29340] usb 5-1: device descriptor read/64, error -32 [ 1819.262213][T29340] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1819.424518][T29340] usb 5-1: Using ep0 maxpacket: 8 [ 1819.430793][T29340] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1819.463241][T29340] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1819.525755][T29340] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1819.631459][T29340] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1819.649520][T29340] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1819.677068][T29340] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.696041][T29340] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1819.720618][T29340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.797664][ T718] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1819.797812][ T717] IPVS: stopping backup sync thread 718 ... [ 1820.076766][T29340] usb 5-1: usb_control_msg returned -32 [ 1820.079866][T29340] usbtmc 5-1:16.0: can't read capabilities [ 1820.155677][T29340] usb 5-1: USB disconnect, device number 115 [ 1823.987714][ T754] IPVS: stopping backup sync thread 755 ... [ 1823.991952][ T755] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1824.736220][ T759] 9pnet_virtio: no channels available for device syz [ 1826.102937][ T770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1826.771572][ T768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5890'. [ 1828.158575][ T783] 9pnet_virtio: no channels available for device syz [ 1829.326610][ T793] 9pnet_virtio: no channels available for device syz [ 1830.259998][ T803] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1830.357780][ T803] netlink: 'syz.2.5897': attribute type 10 has an invalid length. [ 1830.361606][ T803] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1832.634013][ T822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1833.322980][ T826] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1833.327363][ T812] IPVS: stopping backup sync thread 826 ... [ 1834.080298][ T829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5902'. [ 1834.187896][ T832] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1834.188770][ T808] IPVS: stopping backup sync thread 832 ... [ 1837.362442][ T858] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1837.382383][ T846] IPVS: stopping backup sync thread 858 ... [ 1838.764715][ T865] Cache volume key already in use (9p,syz,) [ 1839.959621][ T873] 9pnet_virtio: no channels available for device syz [ 1842.192814][ T903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1844.779544][ T918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1845.185975][ T931] IPVS: stopping backup sync thread 932 ... [ 1846.474005][ T941] IPVS: stopping backup sync thread 942 ... [ 1846.817574][ T949] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1849.097049][ T969] IPVS: stopping backup sync thread 972 ... [ 1849.106671][ T974] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 1849.109586][ T972] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1849.111577][ T974] netlink: 'syz.3.5931': attribute type 10 has an invalid length. [ 1849.131131][ T974] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 1852.682807][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.595504][ T1022] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 1853.628254][ T1022] netlink: 'syz.3.5941': attribute type 10 has an invalid length. [ 1853.633533][ T1022] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 1854.602627][ T1023] 9pnet_virtio: no channels available for device syz [ 1854.727373][ T1029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5942'. [ 1856.423964][ T1039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5945'. [ 1858.217945][ T1048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1858.540601][ T1054] 9pnet_virtio: no channels available for device syz [ 1860.043325][ T1077] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 1860.053664][ T1077] netlink: 'syz.0.5952': attribute type 10 has an invalid length. [ 1860.061531][ T1077] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 1861.870269][ T1100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5955'. [ 1862.072383][ T1093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1863.666444][ T1108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1863.878983][ T1121] 9pnet_virtio: no channels available for device syz [ 1864.593645][ T1131] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1864.604920][ T1087] IPVS: stopping backup sync thread 1131 ... [ 1865.072288][ T1139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5963'. [ 1866.718037][ T1157] 9pnet_virtio: no channels available for device syz [ 1866.915262][ T1159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1869.664919][ T1185] 9pnet_virtio: no channels available for device syz [ 1874.405861][ T1231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5982'. [ 1875.852188][ T1230] IPVS: stopping backup sync thread 949 ... [ 1877.476629][ T1247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5986'. [ 1878.714149][ T1257] 9pnet_virtio: no channels available for device syz [ 1880.265026][ T1272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5992'. [ 1881.189944][ T1277] 9pnet_virtio: no channels available for device syz [ 1881.520675][ T1279] 9pnet_virtio: no channels available for device syz [ 1882.528965][ T1287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1883.189005][ T1294] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1883.189413][ T1283] IPVS: stopping backup sync thread 1294 ... [ 1885.078765][ T1315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6000'. [ 1885.340162][ T1319] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1885.460278][ T1321] IPVS: stopping backup sync thread 1319 ... [ 1885.496347][ T1308] IPVS: stopping backup sync thread 1323 ... [ 1885.498552][ T1323] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1886.716571][ T1330] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1886.721323][ T1332] IPVS: stopping backup sync thread 1330 ... [ 1888.932808][ T1356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1891.660603][ T1379] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1892.363768][ T1366] IPVS: stopping backup sync thread 1379 ... [ 1892.618216][ T1387] IPVS: stopping backup sync thread 1388 ... [ 1892.618723][ T1388] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1894.551537][ T1396] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1894.576917][ T1397] IPVS: stopping backup sync thread 1396 ... [ 1896.948602][ T1415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1897.943401][ T1419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1900.426633][ T1437] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1900.431349][ T1431] IPVS: stopping backup sync thread 1437 ... [ 1900.930834][ T1441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6024'. [ 1900.949478][ T1438] 9pnet_virtio: no channels available for device syz [ 1904.251830][ T1467] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1904.289082][ T1472] IPVS: stopping backup sync thread 1467 ... [ 1904.393979][ T1451] 9pnet_virtio: no channels available for device syz [ 1907.204260][ T1500] 9pnet_virtio: no channels available for device syz [ 1908.182577][ T1505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1909.580420][ T1508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1910.431876][ T1517] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1910.439893][ T1513] IPVS: stopping backup sync thread 1517 ... [ 1910.966077][ T1525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6043'. [ 1912.425158][ T1540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6044'. [ 1913.432858][ T1531] 9pnet_virtio: no channels available for device syz [ 1914.027256][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1916.670609][ T1574] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1916.677727][ T1557] IPVS: stopping backup sync thread 1574 ... [ 1921.087945][ T1619] 9pnet_virtio: no channels available for device syz [ 1922.109322][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1922.327221][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1924.009118][ T1640] 9pnet_virtio: no channels available for device syz [ 1926.308525][ T1655] 9pnet_virtio: no channels available for device syz [ 1926.417606][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6071'. [ 1928.388966][ T1673] 9pnet_virtio: no channels available for device syz [ 1930.118475][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 1931.283276][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6080'. [ 1931.885071][ T1697] 9pnet_virtio: no channels available for device syz [ 1934.282599][ T1722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1934.596958][ T1725] IPVS: stopping backup sync thread 1726 ... [ 1939.449421][ T1755] IPVS: stopping backup sync thread 1764 ... [ 1939.462921][ T1764] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1942.639672][ T1789] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1942.639791][ T1786] IPVS: stopping backup sync thread 1789 ... [ 1943.799553][ T1773] IPVS: stopping backup sync thread 1791 ... [ 1948.211186][ T1839] 9pnet_virtio: no channels available for device syz [ 1948.591604][T28642] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1948.786204][T28642] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.795488][T28642] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1948.807220][T28642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.821601][T28642] usb 9-1: config 0 descriptor?? [ 1949.040571][T28642] usbhid 9-1:0.0: can't add hid device: -71 [ 1949.068957][T28642] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1949.102355][T28642] usb 9-1: USB disconnect, device number 77 [ 1949.603408][T28642] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1950.393964][T28642] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.398020][T28642] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1950.404358][T28642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.421495][T28642] usb 9-1: config 0 descriptor?? [ 1950.637001][T28642] usbhid 9-1:0.0: can't add hid device: -71 [ 1950.643451][T28642] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1950.658020][T28642] usb 9-1: USB disconnect, device number 78 [ 1951.181853][ T839] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1951.350456][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.373074][ T839] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1951.408895][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.424034][ T839] usb 9-1: config 0 descriptor?? [ 1951.838053][ T839] usbhid 9-1:0.0: can't add hid device: -71 [ 1951.840527][ T839] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1951.845920][ T839] usb 9-1: USB disconnect, device number 79 [ 1952.122498][ T1874] 9pnet_virtio: no channels available for device syz [ 1954.986355][ T1899] 9pnet_virtio: no channels available for device syz [ 1957.194930][ T1933] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1957.238098][ T1932] IPVS: stopping backup sync thread 1933 ... [ 1962.305397][ T1973] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1962.306189][ T1972] IPVS: stopping backup sync thread 1973 ... [ 1963.155351][ T1979] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1963.410684][ T1981] IPVS: stopping backup sync thread 1979 ... [ 1963.661427][ T1982] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1963.843059][ T1983] IPVS: stopping backup sync thread 1982 ... [ 1970.272052][ T2018] IPVS: stopping backup sync thread 2030 ... [ 1970.300710][ T2031] IPVS: stopping backup sync thread 2032 ... [ 1975.207129][ T2070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1975.495104][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1979.039487][ T2099] IPVS: stopping backup sync thread 2100 ... [ 1980.225759][ T2107] ./cgroup: Can't lookup blockdev [ 1980.652939][ T2111] IPVS: stopping backup sync thread 2112 ... [ 1988.318554][ T2171] IPVS: stopping backup sync thread 2172 ... [ 1989.098979][ T2174] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1989.099375][ T2173] IPVS: stopping backup sync thread 2174 ... [ 1994.377589][ T2211] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1994.385876][ T2215] IPVS: stopping backup sync thread 2211 ... [ 1995.331615][ T2221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6209'. [ 1998.278502][ T2249] IPVS: stopping backup sync thread 2256 ... [ 1999.946079][ T2268] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1999.957513][ T2268] netlink: 'syz.2.6218': attribute type 10 has an invalid length. [ 1999.972971][ T2268] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 2000.716704][T19240] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 2000.758430][ T2276] IPVS: stopping backup sync thread 2277 ... [ 2000.768848][ T2277] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2001.484713][T19240] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.489895][T19240] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2001.510332][T19240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.520125][T19240] usb 8-1: config 0 descriptor?? [ 2001.936282][T19240] usbhid 8-1:0.0: can't add hid device: -71 [ 2001.945868][T19240] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2002.012022][T19240] usb 8-1: USB disconnect, device number 73 [ 2002.631954][T28642] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2002.797787][T28642] usb 8-1: Using ep0 maxpacket: 32 [ 2002.802728][T28642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.864305][T28642] usb 8-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 2002.874281][T28642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.907272][T28642] usb 8-1: config 0 descriptor?? [ 2003.495805][T28642] usbhid 8-1:0.0: can't add hid device: -71 [ 2003.498850][T28642] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2003.525862][T28642] usb 8-1: USB disconnect, device number 74 [ 2004.051196][ T2303] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2004.067132][ T2302] IPVS: stopping backup sync thread 2303 ... [ 2004.835830][ T2316] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2004.835979][ T2299] IPVS: stopping backup sync thread 2316 ... [ 2005.234852][ T2318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6226'. [ 2005.774308][ T2324] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 2005.912400][ T2324] netlink: 'syz.4.6229': attribute type 10 has an invalid length. [ 2005.916856][ T2324] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 2011.349603][ T2353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6236'. [ 2012.289297][ T2364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6238'. [ 2012.805263][ T2365] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 2012.863563][ T2367] netlink: 'syz.4.6239': attribute type 10 has an invalid length. [ 2012.971891][ T2368] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2012.976828][ T2367] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 2013.016639][ T2357] IPVS: stopping backup sync thread 2368 ... [ 2013.683022][ T24] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2013.875692][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.900140][ T24] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2013.905060][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.913455][ T24] usb 9-1: config 0 descriptor?? [ 2014.152951][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 2014.155742][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2014.166532][ T24] usb 9-1: USB disconnect, device number 80 [ 2014.260021][ T2380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6240'. [ 2014.724157][ T24] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2014.944785][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2014.949077][ T24] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2014.953622][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.976978][ T24] usb 9-1: config 0 descriptor?? [ 2015.889912][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 2015.899001][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2016.101139][ T24] usb 9-1: USB disconnect, device number 81 [ 2016.500665][ T24] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2016.987130][ T2411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6247'. [ 2017.714686][ T2416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6249'. [ 2019.666839][ T2428] 9pnet_virtio: no channels available for device syz [ 2020.257948][ T2429] 9pnet_virtio: no channels available for device syz [ 2024.191383][ T2465] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2024.212255][ T2463] IPVS: stopping backup sync thread 2465 ... [ 2026.528287][ T2482] ./cgroup: Can't lookup blockdev [ 2026.730854][ T2485] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2026.731829][ T2484] IPVS: stopping backup sync thread 2485 ... [ 2026.870420][ T2488] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2026.880762][ T2489] ./cgroup: Can't lookup blockdev [ 2026.999043][ T2474] IPVS: stopping backup sync thread 2488 ... [ 2028.282796][ T2497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6267'. [ 2029.223828][ T2501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6268'. [ 2029.848713][ T2507] ./cgroup: Can't lookup blockdev [ 2029.934140][ T24] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2030.015451][ T2513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6270'. [ 2030.103544][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.122656][ T24] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2030.126341][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.131689][ T24] usb 8-1: config 0 descriptor?? [ 2030.388710][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 2030.391665][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2030.427746][ T24] usb 8-1: USB disconnect, device number 75 [ 2030.972718][ T24] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2031.160178][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.635795][ T24] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2031.656038][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.661165][ T24] usb 8-1: config 0 descriptor?? [ 2031.923185][ T2527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6275'. [ 2032.397965][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 2032.402637][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2032.409011][ T24] usb 8-1: USB disconnect, device number 76 [ 2032.726826][ T2533] ./cgroup: Can't lookup blockdev [ 2032.876136][ T24] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 2033.081914][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 2033.093355][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.107944][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 2033.128350][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.153140][ T24] usb 8-1: config 0 descriptor?? [ 2033.628448][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 2033.633040][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2033.646279][ T24] usb 8-1: USB disconnect, device number 77 [ 2036.919401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.715957][ T2573] 9pnet: Unknown protocol version 9p200 [ 2038.928360][ T2589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6286'. [ 2040.363977][ C0] ================================================================== [ 2040.368320][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 2040.371935][ C0] Read of size 1 at addr ffff888023317818 by task syz-executor/28718 [ 2040.396265][ C0] [ 2040.398076][ C0] CPU: 0 UID: 0 PID: 28718 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 2040.398099][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2040.398110][ C0] Call Trace: [ 2040.398118][ C0] [ 2040.398125][ C0] dump_stack_lvl+0x116/0x1f0 [ 2040.398154][ C0] print_report+0xcd/0x680 [ 2040.398177][ C0] ? __virt_addr_valid+0x81/0x610 [ 2040.398192][ C0] ? __phys_addr+0xe8/0x180 [ 2040.398208][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2040.398227][ C0] kasan_report+0xe0/0x110 [ 2040.398242][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2040.398263][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2040.398281][ C0] __kasan_check_byte+0x36/0x50 [ 2040.398303][ C0] lock_acquire+0xfc/0x350 [ 2040.398334][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 2040.398353][ C0] ? .slowpath+0x9/0x18 [ 2040.398372][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 2040.398389][ C0] ? p9_req_put+0xaf/0x250 [ 2040.398412][ C0] p9_req_put+0xaf/0x250 [ 2040.398431][ C0] req_done+0x1dc/0x2e0 [ 2040.398451][ C0] ? __pfx_req_done+0x10/0x10 [ 2040.398471][ C0] ? __pfx_req_done+0x10/0x10 [ 2040.398489][ C0] vring_interrupt+0x31e/0x400 [ 2040.398521][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 2040.398540][ C0] __handle_irq_event_percpu+0x229/0x7d0 [ 2040.398559][ C0] handle_irq_event+0xab/0x1e0 [ 2040.398575][ C0] handle_edge_irq+0x28e/0xab0 [ 2040.398599][ C0] __common_interrupt+0xdf/0x250 [ 2040.398618][ C0] common_interrupt+0xba/0xe0 [ 2040.398635][ C0] [ 2040.398640][ C0] [ 2040.398646][ C0] asm_common_interrupt+0x26/0x40 [ 2040.398662][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 2040.398683][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 1c 01 50 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 f1 02 00 45 31 ed eb [ 2040.398697][ C0] RSP: 0018:ffffc900033cf3c0 EFLAGS: 00000296 [ 2040.398710][ C0] RAX: 0000000000000046 RBX: ffff8880134e8b68 RCX: 0000000000000001 [ 2040.398720][ C0] RDX: 0000000000000000 RSI: ffffffff8ddee9f0 RDI: ffffffff8c1563e0 [ 2040.398730][ C0] RBP: ffffffff8e5c4700 R08: 0000000000000006 R09: 0000000000001000 [ 2040.398740][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880134e8000 [ 2040.398749][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000003 [ 2040.398764][ C0] lookup_page_ext+0x10d/0x1d0 [ 2040.398785][ C0] page_table_check_set+0x1e6/0x750 [ 2040.398807][ C0] __page_table_check_ptes_set+0x318/0x420 [ 2040.398829][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2040.398853][ C0] ? __lock_acquire+0x622/0x1c90 [ 2040.398872][ C0] copy_present_ptes+0x1aa1/0x6790 [ 2040.398890][ C0] ? lock_acquire+0x179/0x350 [ 2040.398908][ C0] ? __pfx_copy_present_ptes+0x10/0x10 [ 2040.398923][ C0] ? lock_acquire+0x120/0x350 [ 2040.398940][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2040.398960][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2040.398983][ C0] copy_page_range+0x125a/0x5740 [ 2040.399016][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2040.399036][ C0] ? __pfx___might_resched+0x10/0x10 [ 2040.399052][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 2040.399072][ C0] ? dup_mmap+0xe38/0x21d0 [ 2040.399088][ C0] ? down_write+0x14d/0x200 [ 2040.399104][ C0] ? up_write+0x1b2/0x520 [ 2040.399124][ C0] dup_mmap+0xe88/0x21d0 [ 2040.399145][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2040.399169][ C0] copy_process+0x4081/0x76a0 [ 2040.399193][ C0] ? __pfx_copy_process+0x10/0x10 [ 2040.399210][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2040.399230][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2040.399255][ C0] kernel_clone+0xfc/0x960 [ 2040.399272][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2040.399294][ C0] __do_compat_sys_ia32_clone+0xcb/0x110 [ 2040.399311][ C0] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 2040.399334][ C0] ? find_held_lock+0x2b/0x80 [ 2040.399353][ C0] ? rcu_is_watching+0x12/0xc0 [ 2040.399370][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 2040.399386][ C0] do_fast_syscall_32+0x32/0x80 [ 2040.399399][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2040.399417][ C0] RIP: 0023:0xf7fd3579 [ 2040.399431][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2040.399445][ C0] RSP: 002b:00000000ff8252cc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 2040.399462][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 2040.399472][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000581e24a8 [ 2040.399483][ C0] RBP: 00000000f7462ff4 R08: 0000000000000000 R09: 0000000000000000 [ 2040.399492][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2040.399501][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2040.399516][ C0] [ 2040.399522][ C0] [ 2040.836563][ C0] Allocated by task 2582: [ 2040.840262][ C0] kasan_save_stack+0x33/0x60 [ 2040.844046][ C0] kasan_save_track+0x14/0x30 [ 2040.847156][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2040.850189][ C0] p9_client_create+0xc7/0x11c0 [ 2040.853935][ C0] v9fs_session_init+0x1f7/0x1a80 [ 2040.858228][ C0] v9fs_mount+0xc5/0xa30 [ 2040.861198][ C0] legacy_get_tree+0x109/0x220 [ 2040.864444][ C0] vfs_get_tree+0x8b/0x340 [ 2040.867498][ C0] path_mount+0x1414/0x2020 [ 2040.870634][ C0] __ia32_sys_mount+0x28b/0x310 [ 2040.875010][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 2040.879160][ C0] do_fast_syscall_32+0x32/0x80 [ 2040.882430][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2040.886607][ C0] [ 2040.888257][ C0] Freed by task 2582: [ 2040.891198][ C0] kasan_save_stack+0x33/0x60 [ 2040.895637][ C0] kasan_save_track+0x14/0x30 [ 2040.898606][ C0] kasan_save_free_info+0x3b/0x60 [ 2040.901823][ C0] __kasan_slab_free+0x51/0x70 [ 2040.905243][ C0] kfree+0x2b4/0x4d0 [ 2040.908346][ C0] p9_client_create+0xa28/0x11c0 [ 2040.911749][ C0] v9fs_session_init+0x1f7/0x1a80 [ 2040.914959][ C0] v9fs_mount+0xc5/0xa30 [ 2040.918132][ C0] legacy_get_tree+0x109/0x220 [ 2040.922100][ C0] vfs_get_tree+0x8b/0x340 [ 2040.924976][ C0] path_mount+0x1414/0x2020 [ 2040.927899][ C0] __ia32_sys_mount+0x28b/0x310 [ 2040.931132][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 2040.937926][ C0] do_fast_syscall_32+0x32/0x80 [ 2040.941051][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2040.945406][ C0] [ 2040.947179][ C0] The buggy address belongs to the object at ffff888023317800 [ 2040.947179][ C0] which belongs to the cache kmalloc-512 of size 512 [ 2040.956874][ C0] The buggy address is located 24 bytes inside of [ 2040.956874][ C0] freed 512-byte region [ffff888023317800, ffff888023317a00) [ 2040.966766][ C0] [ 2040.968153][ C0] The buggy address belongs to the physical page: [ 2040.972426][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23314 [ 2040.978416][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2040.983972][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2040.988790][ C0] page_type: f5(slab) [ 2040.991687][ C0] raw: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 2040.997677][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 2041.003276][ C0] head: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122 [ 2041.010932][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 2041.017181][ C0] head: 00fff00000000002 ffffea00008cc501 00000000ffffffff 00000000ffffffff [ 2041.023998][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2041.028761][ C0] page dumped because: kasan: bad access detected [ 2041.034515][ C0] page_owner tracks the page as allocated [ 2041.038104][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6585, tgid 6585 (udevd), ts 149374553518, free_ts 147513358001 [ 2041.055636][ C0] post_alloc_hook+0x1c0/0x230 [ 2041.058736][ C0] get_page_from_freelist+0x1321/0x3890 [ 2041.063426][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2041.067231][ C0] new_slab+0x94/0x330 [ 2041.069827][ C0] ___slab_alloc+0xd9c/0x1940 [ 2041.072988][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 2041.076296][ C0] __kmalloc_node_noprof+0x2ed/0x500 [ 2041.079538][ C0] alloc_slab_obj_exts+0x41/0xa0 [ 2041.082688][ C0] new_slab+0x283/0x330 [ 2041.085328][ C0] ___slab_alloc+0xd9c/0x1940 [ 2041.088511][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 2041.093648][ C0] kmem_cache_alloc_noprof+0xef/0x3b0 [ 2041.099220][ C0] __send_signal_locked+0x159/0x12c0 [ 2041.102527][ C0] group_send_sig_info+0x2a4/0x300 [ 2041.105310][ C0] do_bpf_send_signal+0xe1/0x210 [ 2041.107616][ C0] irq_work_single+0x1bf/0x260 [ 2041.111347][ C0] page last free pid 8328 tgid 8328 stack trace: [ 2041.116433][ C0] __free_frozen_pages+0x7fe/0x1180 [ 2041.119579][ C0] vfree+0x1fd/0xb50 [ 2041.121834][ C0] xskq_destroy+0x3b/0x50 [ 2041.124795][ C0] xsk_release+0x4f0/0x820 [ 2041.128542][ C0] __sock_release+0xb0/0x270 [ 2041.132262][ C0] sock_close+0x1c/0x30 [ 2041.135528][ C0] __fput+0x3ff/0xb70 [ 2041.137922][ C0] task_work_run+0x14d/0x240 [ 2041.140794][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 2041.145108][ C0] __do_fast_syscall_32+0x2ac/0x3a0 [ 2041.148781][ C0] do_fast_syscall_32+0x32/0x80 [ 2041.151951][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.157293][ C0] [ 2041.159363][ C0] Memory state around the buggy address: [ 2041.163078][ C0] ffff888023317700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2041.167565][ C0] ffff888023317780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2041.173396][ C0] >ffff888023317800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2041.178164][ C0] ^ [ 2041.181087][ C0] ffff888023317880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2041.189341][ C0] ffff888023317900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2041.193381][ C0] ================================================================== [ 2041.198686][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2041.202236][ C0] CPU: 0 UID: 0 PID: 28718 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 2041.208148][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2041.212737][ C0] Call Trace: [ 2041.214883][ C0] [ 2041.216658][ C0] dump_stack_lvl+0x3d/0x1f0 [ 2041.219195][ C0] panic+0x71c/0x800 [ 2041.221257][ C0] ? __pfx_panic+0x10/0x10 [ 2041.223208][ C0] ? __pfx__printk+0x10/0x10 [ 2041.226154][ C0] ? end_report+0x4c/0x170 [ 2041.228837][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 2041.231765][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2041.235914][ C0] check_panic_on_warn+0xab/0xb0 [ 2041.238601][ C0] end_report+0x107/0x170 [ 2041.240892][ C0] kasan_report+0xee/0x110 [ 2041.247242][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2041.249572][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 2041.252044][ C0] __kasan_check_byte+0x36/0x50 [ 2041.257326][ C0] lock_acquire+0xfc/0x350 [ 2041.259908][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 2041.263487][ C0] ? .slowpath+0x9/0x18 [ 2041.266788][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 2041.269614][ C0] ? p9_req_put+0xaf/0x250 [ 2041.271763][ C0] p9_req_put+0xaf/0x250 [ 2041.273989][ C0] req_done+0x1dc/0x2e0 [ 2041.276194][ C0] ? __pfx_req_done+0x10/0x10 [ 2041.278659][ C0] ? __pfx_req_done+0x10/0x10 [ 2041.280952][ C0] vring_interrupt+0x31e/0x400 [ 2041.283073][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 2041.285459][ C0] __handle_irq_event_percpu+0x229/0x7d0 [ 2041.288189][ C0] handle_irq_event+0xab/0x1e0 [ 2041.290605][ C0] handle_edge_irq+0x28e/0xab0 [ 2041.292957][ C0] __common_interrupt+0xdf/0x250 [ 2041.294930][ C0] common_interrupt+0xba/0xe0 [ 2041.297050][ C0] [ 2041.298465][ C0] [ 2041.299872][ C0] asm_common_interrupt+0x26/0x40 [ 2041.302660][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 2041.304933][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 1c 01 50 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 f1 02 00 45 31 ed eb [ 2041.314556][ C0] RSP: 0018:ffffc900033cf3c0 EFLAGS: 00000296 [ 2041.319501][ C0] RAX: 0000000000000046 RBX: ffff8880134e8b68 RCX: 0000000000000001 [ 2041.323104][ C0] RDX: 0000000000000000 RSI: ffffffff8ddee9f0 RDI: ffffffff8c1563e0 [ 2041.325804][ C0] RBP: ffffffff8e5c4700 R08: 0000000000000006 R09: 0000000000001000 [ 2041.328891][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880134e8000 [ 2041.332089][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000003 [ 2041.337782][ C0] lookup_page_ext+0x10d/0x1d0 [ 2041.340094][ C0] page_table_check_set+0x1e6/0x750 [ 2041.342513][ C0] __page_table_check_ptes_set+0x318/0x420 [ 2041.344842][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2041.347418][ C0] ? __lock_acquire+0x622/0x1c90 [ 2041.349552][ C0] copy_present_ptes+0x1aa1/0x6790 [ 2041.352341][ C0] ? lock_acquire+0x179/0x350 [ 2041.354550][ C0] ? __pfx_copy_present_ptes+0x10/0x10 [ 2041.357561][ C0] ? lock_acquire+0x120/0x350 [ 2041.360499][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2041.364256][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2041.367827][ C0] copy_page_range+0x125a/0x5740 [ 2041.371335][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2041.376083][ C0] ? __pfx___might_resched+0x10/0x10 [ 2041.379509][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 2041.382824][ C0] ? dup_mmap+0xe38/0x21d0 [ 2041.385485][ C0] ? down_write+0x14d/0x200 [ 2041.388678][ C0] ? up_write+0x1b2/0x520 [ 2041.391308][ C0] dup_mmap+0xe88/0x21d0 [ 2041.393435][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2041.395261][ C0] copy_process+0x4081/0x76a0 [ 2041.397365][ C0] ? __pfx_copy_process+0x10/0x10 [ 2041.399504][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2041.401845][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2041.404159][ C0] kernel_clone+0xfc/0x960 [ 2041.406219][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2041.408686][ C0] __do_compat_sys_ia32_clone+0xcb/0x110 [ 2041.412484][ C0] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 2041.416120][ C0] ? find_held_lock+0x2b/0x80 [ 2041.419081][ C0] ? rcu_is_watching+0x12/0xc0 [ 2041.421957][ C0] __do_fast_syscall_32+0x7c/0x3a0 [ 2041.425395][ C0] do_fast_syscall_32+0x32/0x80 [ 2041.428523][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.432999][ C0] RIP: 0023:0xf7fd3579 [ 2041.435842][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2041.447992][ C0] RSP: 002b:00000000ff8252cc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 2041.453802][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 2041.460630][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000581e24a8 [ 2041.466449][ C0] RBP: 00000000f7462ff4 R08: 0000000000000000 R09: 0000000000000000 [ 2041.471600][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2041.476513][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2041.482362][ C0] [ 2042.629462][ C0] Shutting down cpus with NMI [ 2042.632387][ C0] Kernel Offset: disabled [ 2042.634532][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:39:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85580b55 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc90000007768 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3333323038386552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b06da00 R15=ffffffff85580af0 RIP=ffffffff85580b7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc55c0 CR3=00000000741bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff11002788c03 RBX=1ffff92004a69eef RCX=ffffc9002ac86000 RDX=ffffc9002534f8f8 RSI=ffffc9002534fd58 RDI=ffff88806c4c0000 RBP=ffffc9002534f8f8 RSP=ffffc9002534f770 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888013c46000 R13=ffffc9002534fd58 R14=dffffc0000000000 R15=ffff888013c46018 RIP=ffffffff89520920 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032712ffc CR3=0000000042fca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000021e409f RBX=0000000000000002 RCX=ffffffff8b7c3be9 RDX=0000000000000000 RSI=ffffffff8de13e6d RDI=ffffffff8c1563e0 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90a83050 R15=0000000000000000 RIP=ffffffff8b7c274f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7464570 CR3=0000000042fca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030400000000 0000000a00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff93cd2228 RCX=ffffffff8196fdc1 RDX=fffffbfff215060b RSI=ffffffff8c156360 RDI=ffffffff8df1edb8 RBP=0000000000000003 RSP=ffffc9002536f690 R8 =0000000000000000 R9 =fffffbfff215060a R10=ffffffff90a83057 R11=0000000000000001 R12=dffffc0000000000 R13=ffffc9002536f750 R14=0000000000000000 R15=1ffff92004a6dee4 RIP=ffffffff81a0e5ac RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097861000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7463230 CR3=000000006efe1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bd1a9865352150c5 686f5c94b8dca1f4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 743bae4aeaf7fb4b b8e89ea64c401d22 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd036c5f62e735d2 bf794ea748e59fa4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 086b34e6d092ebe3 31398586715211dd ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1628f2d600800100 5baa6d3000800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59d013e2000004d4 000004d400800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ba921e2000004d4 000004d400000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004d45bb134fe 5bae5dbc000004d4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 10122e13f4b87497 5c9618e97eeff2f8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2251369cadee749 deb0cd4c1b50af0c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000